$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa File: 2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa (raw, json) Hash identifier: JwML+//6BbEtm4TjNBdzEHdpcDtgJpB84k/cq+jecKE= Subject key identifier: 4F:AF:D1:32:31:04:87:BF:60:A2:1D:59:E5:80:94:CA:E3:E7:0C:58 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A62AC565BEE36903CF40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a6:2a:c5:65:be:e3:69:03:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=8c4cadc2-1882-403d-bb3f-b8a6b436ca42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:69:91:61:d7:9e:8d:e1:4f:8d:66:3d:25: 9a:23:b9:6f:25:7e:c7:17:c9:ed:07:6a:b5:14:e0: d3:57:d9:42:4e:3a:d3:4a:4e:e6:98:f9:aa:a3:08: 8a:92:a2:79:3a:e0:2c:47:1f:99:9f:c1:13:d2:4e: b3:27:35:dc:ab:2e:ff:80:a1:ab:d2:71:8f:57:93: e7:f0:a3:77:94:76:64:9f:ef:67:a4:53:08:7c:3a: 82:7f:d8:3a:9f:2a:da:d0:69:e7:c8:80:0e:5f:30: b5:32:7b:c3:c8:9a:20:3a:47:a3:1e:9c:5f:15:b7: 72:49:f2:78:ee:f1:b3:27:84:b0:5b:7a:96:60:b8: 79:a2:f9:43:12:da:22:9b:d8:3a:fe:99:36:06:17: 87:52:3e:60:36:79:c6:9c:4b:27:5a:22:68:22:06: 37:34:d0:75:54:6a:9d:64:ee:2c:fc:32:52:19:45: c0:de:ff:e9:b2:22:08:48:8c:32:a8:22:e7:8d:d6: e8:5b:8d:dc:f4:fd:20:ba:ec:11:41:4e:37:fb:83: b1:fd:92:68:64:3d:94:69:5c:5e:22:e2:ae:95:83: ec:ef:10:92:dd:58:13:c3:10:eb:3e:33:04:30:fe: 0b:0c:e3:d2:74:7c:5c:d7:df:5a:27:46:9b:83:c1: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AF:D1:32:31:04:87:BF:60:A2:1D:59:E5:80:94:CA:E3:E7:0C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a4ae90e-59c1-3c78-8f31-fcae7184213d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3d:60:c8:6c:61:26:79:99:65:18:ac:0f:82:11:96:9f:3e: 31:95:07:e8:72:a4:c7:89:4e:aa:e8:e6:cc:9c:b4:cd:52:91: 51:db:62:b0:60:ea:2c:a6:ff:c0:9f:4d:1b:0c:e1:44:c0:ac: 04:49:2f:9f:9b:b5:87:79:a4:5d:31:27:7f:c0:f6:2d:4f:cd: fc:6f:d1:b2:18:be:d0:7b:dd:21:eb:88:51:20:3d:33:93:f0: 30:a6:6a:49:cb:60:fa:40:7b:18:7d:c5:2d:53:d7:df:3a:7e: 36:fe:a4:c5:e4:73:e6:3a:72:75:3e:6a:0c:04:9b:8f:b4:37: 72:50:74:fc:55:9d:c1:f4:5c:b2:e1:96:aa:40:bf:a6:3e:3c: 4c:9a:b2:e7:65:20:fd:a9:0b:a6:ac:34:a6:b9:41:c7:5c:86: 10:f4:76:08:bf:7a:50:99:ba:58:8d:1f:de:e7:f7:cd:4d:3b: f9:8b:3b:07:58:66:b6:72:eb:3e:bf:38:20:08:96:c5:40:e1: 42:09:30:9b:43:9d:5c:ef:76:f6:fd:32:f7:d6:ab:d7:8c:e5: 0f:1c:96:57:7d:df:cb:28:19:19:59:3e:3d:14:84:d2:58:3b: 35:07:5e:db:f9:71:97:70:59:f3:0b:bd:39:9b:14:39:26:ab: d5:d0:28:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqYqxWW+42kDz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OGM0Y2FkYzItMTg4Mi00MDNkLWJiM2YtYjhhNmI0MzZjYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09dpkWHXno3hT41mPSWaI7lvJX7HF8ntB2q1 FODTV9lCTjrTSk7mmPmqowiKkqJ5OuAsRx+Zn8ET0k6zJzXcqy7/gKGr0nGPV5Pn 8KN3lHZkn+9npFMIfDqCf9g6nyra0GnnyIAOXzC1MnvDyJogOkejHpxfFbdySfJ4 7vGzJ4SwW3qWYLh5ovlDEtoim9g6/pk2BheHUj5gNnnGnEsnWiJoIgY3NNB1VGqd ZO4s/DJSGUXA3v/psiIISIwyqCLnjdboW43c9P0guuwRQU43+4Ox/ZJoZD2UaVxe IuKulYPs7xCS3VgTwxDrPjMEMP4LDOPSdHxc199aJ0abg8Ez2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+v0TIxBIe/YKIdWeWAlMrj5wxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmE0YWU5MGUtNTljMS0z Yzc4LThmMzEtZmNhZTcxODQyMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6znMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF89YMhsYSZ5mWUYrA+CEZafPjGVB+hypMeJTqro5syctM1SkVHbYrBg 6iym/8CfTRsM4UTArARJL5+btYd5pF0xJ3/A9i1Pzfxv0bIYvtB73SHriFEgPTOT 8DCmaknLYPpAexh9xS1T1986fjb+pMXkc+Y6cnU+agwEm4+0N3JQdPxVncH0XLLh lqpAv6Y+PEyasudlIP2pC6asNKa5QcdchhD0dgi/elCZuliNH97n981NO/mLOwdY ZrZy6z6/OCAIlsVA4UIJMJtDnVzvdvb9MvfWq9eM5Q8clld938soGRlZPj0UhNJY OzUHXtv5cZdwWfMLvTmbFDkmq9XQKIQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:45 2025 by rpki-client